Merge pull request #64 from narrrl/chore/sdk-0.10.1

chore(deps): bump proton-sdk and proton-drive-rs to 0.10.1
Merge pull request #63 from narrrl/fix/sim-flakes-and-open-race
2026-11-03 16:41:26 +01:00 · 2026-10-31 19:40:34 +01:00 · 2026-10-31 19:40:24 +01:00 · 2026-10-31 19:40:14 +01:00 · 2026-10-31 19:40:04 +01:00 · 2026-10-31 19:39:53 +01:00
3 changed files with 19 additions and 10 deletions
@@ -3779,9 +3779,9 @@ dependencies = [

 [[package]]
 name = "proton-drive-rs"
-version = "0.10.0"
+version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f70318394b2815b009c52f804d75747086db93a338ceb6eae62541f2b25d5bf"
+checksum = "a8fa2a88130883010b32035e208aaa36fb275f6d7d78ed44a1069b1d33d24481"
 dependencies = [
 "async-trait",
 "base64 0.23.1",
@@ -3806,9 +3806,9 @@ dependencies = [

 [[package]]
 name = "proton-sdk"
-version = "0.10.0"
+version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4196392032f56b3bbaac0bb1f24eea62fa7e2a0af72004de8d08e518d14720fb"
+checksum = "af0bf8d50fa829d1a65b09c6855b606578d02734d4089874c971d1063c23c353"
 dependencies = [
 "aes-gcm 0.11.1",
 "async-trait",
@@ -15,8 +15,8 @@ keywords = ["proton", "drive", "fuse", "sync", "linux"]
 categories = ["filesystem", "command-line-utilities"]

 [workspace.dependencies]
-proton-sdk = { version = "0.10.0" }
-proton-drive-rs = { version = "0.10.0" }
+proton-sdk = { version = "0.10.1" }
+proton-drive-rs = { version = "0.10.1" }

 # Internal crates.
 pdfs-core = { path = "crates/pdfs-core" }
@@ -72,7 +72,6 @@ original wording.
 | [B273](#b273--a-restore-proposes-another-computers-paths-when-the-two-share-a-hostname) | A restore proposes another computer's paths when the two share a hostname | Not fixed |
 | [B270](#b270--one-file-left-in-a-mirror-folder-clears-the-wipe-guard-for-all-the-others) | One file left in a mirror folder clears the wipe guard for all the others | Not fixed |
 | [B267](#b267--a-key-failure-at-a-start-from-a-warm-cache-shows-as-offline-for-good) | A key failure at a start from a warm cache shows as offline for good | Not fixed |
-| [B265](#b265--address-keys-whose-token-is-for-an-inactive-account-key-never-open) | Address keys whose token is for an inactive account key never open | Needs an SDK change; not reproduced |
 | [B134](#b134--a-file-deleted-online-while-the-drain-checks-its-write-is-kept-as-a-conflict-copy) | A file deleted online while the drain checks its write is kept as a conflict copy | Only with `local_first` off |
 | [B91](#b91--the-daemon-hung-overnight-and-nothing-could-say-what-it-was-waiting-on) | The daemon hung overnight, and nothing could say what it was waiting on | The cause is not diagnosed; the daemon now reports where it is stuck and is restarted |
 | [B67](#b67--fresh-state-restore-can-silently-select-a-new-device-high-22) | Fresh-state restore can silently select a new device (HIGH-22) | An ambiguous device after a loss of local state is not asked about |
@@ -110,6 +109,7 @@ a live account since.

 | Entry | Title |
 |---|---|
+| [B265](#b265--address-keys-whose-token-is-for-an-inactive-account-key-never-open) | Address keys whose token is for an inactive account key never open |
 | [B274](#b274--opening-a-file-for-writing-fails-with-eio-while-its-queued-revision-lands) | Opening a file for writing fails with EIO while its queued revision lands |
 | [B271](#b271--one-failed-listing-makes-a-large-first-sync-start-over-from-nothing) | One failed listing makes a large first sync start over from nothing |
 | [B266](#b266--pin-unpin-search-and-node-loads-report-a-database-error-as-offline) | Pin, unpin, search and node loads report a database error as "offline" |
@@ -618,7 +618,7 @@ error, reads as offline. That covers every caller at once, the database ones inc

 ### B265 — Address keys whose token is for an inactive account key never open

-**Status:** Open
+**Status:** Fixed, not verified live
 **Found:** 2026-10-31, code audit after issue #40: a Duo account whose mount failed on every
 start with `fetch My Files root: cryptography error: failed to decrypt: missing key`, after three
 `failed to decrypt address key token` warnings. The web app worked. B210's fix does not apply,
@@ -635,8 +635,17 @@ already reports "token is for inactive account key", so the case is known. Separ
 `addresses()` fails as a whole through `?` when one address has no usable primary key, which
 takes the working addresses down with it.

-**Fix.** Not done, and it belongs in the SDK. Use every account key that opens for decrypting
-tokens, and only the active ones for signing. Skip and log an address that cannot be opened.
+**Fix.** In `proton-sdk` 0.10.1 (narrrl/proton-sdk-rs#3). Tokens are tried with every account
+key that opens, active ones first, and signing uses active keys only. An address that cannot be
+opened is left out with a warning, and the others work; `addresses()` fails only when none
+opens. When the left-out address is the default, `default_address` fails with the reason
+rather than signing with another address. `key_report` walks the same chain, so `pdfs diagnose`
+reports such a key as opening. Not verified against an account with an inactive key, since
+none is at hand; issue #40's reporter can confirm.
+
+**Test:** `an_address_key_whose_token_is_for_an_inactive_account_key_opens`,
+`an_address_whose_keys_do_not_open_leaves_the_others_working` and
+`an_account_whose_addresses_all_fail_to_open_is_an_error` in `proton-sdk`.

 ---
Author	SHA1	Message	Date
nvrl	c52f2098f2	Merge pull request #64 from narrrl/chore/sdk-0.10.1 chore(deps): bump proton-sdk and proton-drive-rs to 0.10.1	2026-10-31 19:40:34 +01:00
nvrl	f4a2674b9c	Merge pull request #63 from narrrl/fix/sim-flakes-and-open-race fix(fuse): retry a write open whose queued revision landed under the copy	2026-10-31 19:40:24 +01:00
nvrl	347861bbc1	Merge pull request #62 from narrrl/fix/restore-outcome-and-walk-gaps fix(fuse,cli): keep a pass going past a failed listing, report skipped restores	2026-10-31 19:40:14 +01:00
nvrl	c57763b07f	Merge pull request #61 from narrrl/fix/diagnose-coverage fix(cli): have diagnose report failing writes, a pause and folders in error	2026-10-31 19:40:04 +01:00
nvrl	846dfd8d14	Merge pull request #60 from narrrl/fix/db-errors-not-offline fix(core): read database errors handed to from_api as internal, not offline	2026-10-31 19:39:53 +01:00
nvrl	2ae99de844	Merge pull request #59 from narrrl/fix/mount-failure-surfaced fix(cli,core,fuse,gui): say why the mount keeps failing, and back off	2026-10-31 19:39:44 +01:00
nvrl	69ff216e7d	Merge pull request #58 from narrrl/fix/never-synced-label fix(gui): say a folder is waiting for its first sync, not up to date	2026-10-31 19:39:34 +01:00
nvrl	40aa8016ea	Merge branch 'fix/sim-flakes-and-open-race' into chore/sdk-0.10.1 # Conflicts: # docs/BUGS.md	2026-10-31 19:26:47 +01:00
nvrl	7957e1ed59	chore(deps): bump proton-sdk and proton-drive-rs to 0.10.1 0.10.1 decrypts address key tokens with every account key that opens, not only the active ones, and leaves out an address whose keys do not open instead of failing the account. That is the likely cause of issue #40, a mount that retried "missing key" forever (B265).	2026-10-31 13:48:01 +01:00